goldenmember

srv12039172893: Many ISPs across EU use Cisco's Talos Intelligence and similar solutions that automatically feed themselves of random blacklists like Uceprotect. [1]

https://news.ycombinator.com/item?id=49966613

> _website_ was being blocked

Thanks! I was worried that the word 'extorting' was a bit too strong, but it seems I wasn't the first one to apply for the UCEPROTECT service.

Well, if it's just an indicator, why not delist automatically on request, as other blocklists do? It seems inappropriate to charge for this.

Orange FR.

While I absolutely agree that Orange is acting irresponsibly here, I also understand that they're not the only ones who rely on UCEPROTECT.

Following your logic, we'd need to block the entire US, since that's where DigitalOcean's ASN is registered.

I disagree. Normally you can reach out to request delisting, and it's free.

As I explained, Orange's security filter seems to automatically block requests at the DNS level if your website's domain resolves to an IP listed on UCEPROTECT Level 3. In this case, that appears to be the entire DigitalOcean ASN.